519: The Password Is All Zeros
Embedded23 Jan

519: The Password Is All Zeros

Mark Omo and James Rowley spoke with us about safecracking, security, and the ethics of doing a bad job.

Mark and James gave an excellent talk on the development of their safecracking tools at DEF CON 33: Cash, Drugs, and Guns: Why Your Safes Aren't Safe. It included a section of interaction involving the lock maker's lawyers bullying them and how the Electronic Frontier Foundation (EFF) has a Coders' Rights Project to support security research.

As mentioned in the show, the US Cyber Trust Mark baseline has a very straightforward checklist; NISTIR 8259 is the overall standard, NISTIR 8259A is the technical checklist, NISTIR 8259B is the non-technical (process/maintenance) checklist. Roughly the process is NISTIR 8259 -> Plan/Guidance; NISTIR 8259A -> Build; NISTIR 8259B -> Support.

We discussed ETSI EN 303 645 V3.1.3 (2024-09) Cyber Security for Consumer Internet of Things: Baseline Requirement and the EU's CRA: Cyber Resilience Act which requires manufacturers to implement security by design, have security by default, provide free security updates, and protect confidentiality. See more here: How to prepare for the Cyber Resilience Act (CRA): A guide for manufacturers.

We didn't mention Ghidra in the show specifically, but it is a tool for reverse engineering software: given a binary image, what was the code?

Some of the safecracking was helped by the lock maker using the same processor in the PS4 which has many people looking to crack it. See fail0verflow :: PS4 Aux Hax 1: Intro & Aeolia for an introduction.

Mark and James have presented multiple times at Hardwear.io, a series of conferences and webinars about security (not wearables). Some related highlights:

Episoder(569)

522: The Information Is In Poop

522: The Information Is In Poop

Sonia Grego speaks with us about a topic no one likes to talk about, but could be used to monitor personal dietary health and widespread disease outbreaks. Toilets! Sonia leads Duke University's Smart...

6 Mar 54min

521: Are You The Tiny Domino?

521: Are You The Tiny Domino?

Kenneth Finnegan entertained us with stories about accidentally contributing to the internet's ability to network. Wondering how the internet works? All those terms about IPv4, IPv6, BGP, OSPF, CDN an...

20 Feb 1h 3min

520: All Sorts of Interesting Facts About Teeth

520: All Sorts of Interesting Facts About Teeth

Chris and Elecia apologize, discuss uses and abuses of chatbots, reach out to an uncertain manager, try to help someone out of their professor's draconian rules, and extol the joys of reading.  Chabot...

6 Feb 58min

518: Nothing We Can Do About Frogs

518: Nothing We Can Do About Frogs

James Cameron spoke with us about programming for and operating a large telescope. The show is a blend of astronomy, engineering on the fly, and weird lady bug habitats.  The Anglo-Australian Telescop...

9 Jan 1h 8min

517: A Direct, Sensible Podcast

517: A Direct, Sensible Podcast

Nathan Jones and Chris Svec give Chris and Elecia their 2025 performance review.  Donations went to Elevate Tutoring, an organization that provides funding and support to low-income and first-generati...

2 Jan 1h 1min

516: Voices From the Cataclysms of the Universe

516: Voices From the Cataclysms of the Universe

Sophi Kravitz joined us to talk about art, science, and engineering.  You can see Messages from Space on Sophi's website /sophikravitz.com). A subset of the artwork had a short stay for a demo at Chab...

12 Des 202558min

515: Script Boomers

515: Script Boomers

Nick Kartsioukas joined us to talk about security in embedded systems.  Common Vulnerabilities and Exposures (CVE) is the primary database to check your software libraries, tools, and OSs: cve.org. Op...

27 Nov 20251h 10min

Populært innen Vitenskap

fastlegen
rekommandert
tingenes-tilstand
jss
rss-rekommandert
sinnsyn
forskningno
liberal-halvtime
fjellsportpodden
rss-nysgjerrige-norge
kvinnehelsepodden
nordnorsk-historie
villmarksliv
vett-og-vitenskap-med-gaute-einevoll
hva-er-greia-med
smart-forklart
nevropodden
tidlose-historier
aldring-og-helse-podden
rss-radium